Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RImox-XMjU-K7szWtWIcy50o0Vg.roa
File:                     RImox-XMjU-K7szWtWIcy50o0Vg.roa (raw, json)
Hash identifier:          lXAz4uhEHHuftSNEfv6QCyvFrt8TKDpaRY8wcLRnGmM=
Subject key identifier:   44:89:A8:C7:E5:CC:8D:4F:8A:EE:CC:D6:B5:62:1C:CB:9D:28:D1:58
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       055D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RImox-XMjU-K7szWtWIcy50o0Vg.roa
Signing time:             Tue 31 Mar 2026 08:19:56 +0000
ROA not before:           Tue 31 Mar 2026 08:19:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.157.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4489A8C7E5CC8D4F8AEECCD6B5621CCB9D28D158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:0b:44:2f:90:6e:30:cb:7d:0f:d3:cf:fe:
                    62:c9:15:d0:4b:aa:9e:a1:af:5b:73:5d:63:73:b0:
                    d7:bc:4c:e3:7b:d7:21:c0:4a:8f:3d:f0:26:3d:83:
                    8b:a4:51:86:18:f6:96:c7:e2:33:1d:92:40:0e:4f:
                    3d:87:92:98:42:3c:11:08:c9:16:6a:c5:10:d3:d5:
                    d3:a4:aa:86:cc:ee:3a:77:92:b5:7a:84:dd:19:8e:
                    bb:81:f3:ba:05:fa:fb:ba:ad:70:50:a7:81:1d:22:
                    0e:fe:1a:08:1c:9e:c0:e2:86:21:ba:7a:bb:e6:81:
                    ec:ec:0b:09:0e:11:86:f0:b4:51:ad:49:e9:c5:0f:
                    f6:da:37:9a:0b:c3:34:96:0e:eb:42:43:ee:45:af:
                    6e:5c:c0:db:7a:5b:c9:f2:2a:60:e5:67:8f:25:e9:
                    09:d0:fc:af:e6:ef:4b:9e:29:a2:89:53:83:64:f2:
                    86:9b:2b:cf:da:91:1e:2b:e4:b9:f7:d1:68:4f:f2:
                    42:b0:d7:fc:71:a8:92:e3:e2:62:cf:09:b6:5f:b9:
                    9d:db:a0:d3:f2:d0:e9:b0:2c:f0:41:a4:a4:30:a1:
                    0c:ec:df:a7:ab:85:af:7d:43:9c:2e:a7:c9:97:d2:
                    c8:2f:0f:76:04:f7:2a:bf:9f:25:7b:01:96:5d:72:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:A8:C7:E5:CC:8D:4F:8A:EE:CC:D6:B5:62:1C:CB:9D:28:D1:58
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RImox-XMjU-K7szWtWIcy50o0Vg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:e5:7d:9b:15:98:2f:f2:84:0d:db:7a:76:8f:f7:25:96:
         f9:a0:54:0a:aa:ef:92:3d:e9:0f:f2:63:a2:3c:50:d7:65:d4:
         9d:82:65:20:37:ba:3c:5e:1c:45:ae:b1:0b:38:95:30:7e:28:
         76:ff:a6:a4:20:5f:59:01:c9:5b:e6:77:40:0c:cd:a5:d6:61:
         e3:d5:10:b7:8e:3c:67:41:12:1c:45:80:c4:b6:60:a4:dc:80:
         f7:c1:ad:a3:d3:fe:ca:cc:7f:11:2a:84:66:a9:7b:94:5c:46:
         83:cc:b8:e1:4e:a3:1e:ed:8f:bb:45:6c:70:c6:41:52:96:89:
         6b:f6:4b:0d:26:3c:e5:63:b2:f3:eb:2e:91:83:5a:e5:a1:fd:
         80:22:6a:0c:88:04:4e:e1:84:c7:37:dd:8f:5f:bf:07:9e:53:
         f1:7f:8e:37:00:2f:eb:88:ee:ea:43:7c:a3:ee:2e:86:8a:22:
         a2:c7:24:35:f2:a1:c3:17:9b:81:1f:d1:18:c9:05:a5:99:a1:
         a2:cf:5a:c3:73:c2:77:4b:6a:54:6d:9d:0c:aa:d0:81:7d:63:
         34:0e:e7:f3:d5:85:61:19:14:25:f6:ef:8f:65:65:d3:85:e1:
         df:5e:2f:af:ab:c2:2f:b6:0f:ba:17:2f:0e:3b:6a:0a:f5:fb:
         fc:9c:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:21 2026 by rpki-client